General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.61120451.25553.5835

  • Size

    2.6MB

  • Sample

    220802-c21yesfce8

  • MD5

    70e966394bf9947ff01b681bab9d0f71

  • SHA1

    53946411e4e975a9ed354b16cd22041108e9f596

  • SHA256

    c7e3deb446233da1eb6c6df66913065773d510a21750a9ea675b69be46ab245a

  • SHA512

    a71a0b9b265b3c31c01305b121b386b8beb14cb6f670df4cbdad3d2fb7a3b3c508b25b48b253cba4c9aacde77e47fc32481fdc4cfc9221af83ea90ab7a6fc200

Malware Config

Extracted

Family

kutaki

C2

http://ojorobia.club/laptop/laptop.php

http://terebinnahicc.club/sec/kool.txt

Targets

    • Target

      SecuriteInfo.com.Trojan.GenericKD.61120451.25553.5835

    • Size

      2.6MB

    • MD5

      70e966394bf9947ff01b681bab9d0f71

    • SHA1

      53946411e4e975a9ed354b16cd22041108e9f596

    • SHA256

      c7e3deb446233da1eb6c6df66913065773d510a21750a9ea675b69be46ab245a

    • SHA512

      a71a0b9b265b3c31c01305b121b386b8beb14cb6f670df4cbdad3d2fb7a3b3c508b25b48b253cba4c9aacde77e47fc32481fdc4cfc9221af83ea90ab7a6fc200

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks